Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
File:                     vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json)
Hash identifier:          z+0vDWHrZK6R6S0tnPlmDo35r5KDksPo3+LU0S/9hQg=
Subject key identifier:   B2:6E:2F:EF:E9:9F:BD:E3:59:79:2F:AD:92:3F:4F:27:63:96:57:A6
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Certificate issuer:       /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial:       019DA7558E7FFF05A3549C8D75F94EF1AEFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
Manifest number:          1440
Signing time:             Sun 19 Apr 2026 20:01:35 +0000
Manifest this update:     Sun 19 Apr 2026 20:01:35 +0000
Manifest next update:     Mon 20 Apr 2026 20:01:35 +0000
Files and hashes:         1: 4K_95KFZWMhbPpIfz5E1jHBv5aw.roa (hash: S+/oi+d3olEq6tAFWe3He8qCofTZg2SAbS0y1lTVFbQ=)
                          2: 8JHe7AaBIPNauRvBmwgzSlc2Olk.roa (hash: +p1NTN9tpOnp47raavb228o9/rb5/ylv96jkBXGbTHQ=)
                          3: 9Yph-pozsAa1u8D3EORz5KZEkck.roa (hash: eBaChJ/lL8SbnPpF1SLCUTRSIb4xLZthmgzcZwPUd1M=)
                          4: AEunzLWh3gsHOrYJNXhTSiOnqEU.roa (hash: a+6FwmOlMr9S4qz3PdaxvAJ+0nFrNrSk/lgCkrtBWLw=)
                          5: BmzDco6FUeR2pV7CetfxwgyZzwU.roa (hash: 3e8ATRNUbcI+nS1vmGLQB8ObHNnkxsHOjtgJ15KBPNU=)
                          6: EGTr11Cn33WgsBkSO-DW_brv2pQ.roa (hash: WbBfhfc/J57F6babpd8iRrGBrz8Jx8j1fD8g8nHbBpM=)
                          7: HoTv0sdQLHBWRiUvVVDaAHr5gZE.roa (hash: DIU7NFLXWQYLWOK2aoJC+a/KoOz45jlF8l8WQecGPFM=)
                          8: IADu_a3hKXhr1Hf3Wxg7vE9pXSw.roa (hash: y5tfLHXKWazA7AwML4TwjE9ej8TsMaQiHDfSzy/WlnI=)
                          9: MSktJCjRKQDGOhyyr4mKUY-X9I0.roa (hash: YB2yhni5jmhv5LOS3OBNxLtMUZLfwVnpogHoPFW8JJc=)
                          10: Q7sGk7ECwFV3meUPYImkro5mZn8.roa (hash: yPT2eaBvSLQfJfLB4jWSat0V9vFdL71JwO3EoW7qPCQ=)
                          11: QkokzrYDGI69z71ocapb49HcmMw.roa (hash: BPEQLv+L5DDtagemk+MXVy03tCKM+xoA01OlIV162OU=)
                          12: TBbYZVnRjlYXHQAtPcfmE7zFNhc.roa (hash: gwN06t/I7Jawt3LQMpSh1ruXZaJYB/QUXUCidscAwp0=)
                          13: ThdY1NGqdEAlbacIpCzIWWjl8-M.roa (hash: VhQ5Tvljs/taZI++HCXLozJ3N8a0YMuM7YHVXeQMk0Y=)
                          14: YrfvxNJdeHYuSdfjBibJ7k6pvEE.roa (hash: oBcJN0/vUgerckttMrITgGrAWVOsR/md3WZHA4+tgo0=)
                          15: ZDSoVMaxuelayYkHDT1Cece0cLM.roa (hash: YJ9/iqfEmNXXNYGq5w6yN8VfwFD7csp8PUDUTe1uRmA=)
                          16: _w6riE4OlRprr7MI-yGnTko28Sg.roa (hash: Gwzb8KH6//hbsd3+z42M1mtGTl+aF6C5ToJY0z33ZFs=)
                          17: jlOSteO5B4HlUDCHpcrOn1tZyw8.roa (hash: PNBhGbv1owj//wNV6ueV101gABFDOCaZFzVqrXAhf8s=)
                          18: oBNWk0ANrXJFnqpqi8qJWun9bTg.roa (hash: ersLK1F7q7UrsdCXpRyyrcybt+NPvXoXFfuofv9kyjc=)
                          19: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: OSCMZEC6dcJh8pP56A7isiIxa7NtVCV3jeSVPsG+0m0=)
                          20: w3qodbcoa2ZvgoDJeO5ygCI2aAk.roa (hash: LAkyIylHnXBQNUrOi88pTzQDfdyi1/aUJB7HDCmUEbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 20:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a7:55:8e:7f:ff:05:a3:54:9c:8d:75:f9:4e:f1:ae:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
        Validity
            Not Before: Apr 19 20:01:35 2026 GMT
            Not After : Apr 20 20:01:35 2026 GMT
        Subject: CN=b26e2fefe99fbde359792fad923f4f27639657a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:dd:6b:05:2c:05:34:c1:bc:15:5c:26:e6:c0:
                    d3:e0:0c:8e:02:de:f5:cf:ff:07:a2:b5:5e:64:aa:
                    03:1c:35:4f:eb:7e:6b:56:17:45:c5:c5:0a:6c:91:
                    19:39:cd:e2:1b:8c:51:f1:a7:6c:2a:80:96:50:b4:
                    3d:80:6e:1d:ac:f8:59:cc:40:b8:22:9c:df:68:2d:
                    99:a3:87:a2:18:15:46:1a:77:7e:32:36:32:2a:79:
                    8d:bc:f1:8b:e6:cf:1a:b1:a2:c1:07:f8:13:56:7e:
                    fd:d9:e9:ca:b5:ad:12:9b:46:e7:8d:d0:01:5d:70:
                    0a:cb:fc:26:ff:86:69:f5:f7:23:a7:65:79:01:3d:
                    a7:fc:eb:2a:09:03:dc:f6:9e:2b:c6:e2:c3:4e:b0:
                    ea:d7:41:30:7d:c7:0c:96:9d:fc:3d:32:43:85:1e:
                    ad:31:3a:6a:91:0b:31:45:3b:1c:7c:32:02:f7:87:
                    84:0c:94:b3:98:62:e5:77:43:01:86:d3:2e:ca:ed:
                    ce:05:92:36:e6:34:41:f5:9b:f5:e8:99:c5:1d:37:
                    47:cb:71:20:0e:3b:00:ff:89:cd:ce:45:67:4f:e9:
                    38:b6:56:4c:93:12:71:b3:49:97:09:44:65:33:a4:
                    e2:94:da:a7:32:f0:4c:5c:e1:02:8b:3c:53:27:4f:
                    ac:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6E:2F:EF:E9:9F:BD:E3:59:79:2F:AD:92:3F:4F:27:63:96:57:A6
            X509v3 Authority Key Identifier:
                keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:85:b2:e0:a7:82:f9:7d:70:14:d5:98:46:fc:1d:53:ad:9c:
         77:83:cc:51:e5:02:cd:95:d7:46:31:1f:92:e2:b7:a7:24:20:
         52:bc:3b:41:24:c9:b2:be:6c:2e:d2:44:94:e5:dd:1f:ae:06:
         51:a3:a2:36:db:28:3f:fb:99:b1:be:49:73:9f:7e:29:1e:5e:
         70:f6:9c:c7:14:4a:c7:5e:66:90:66:48:9b:42:fa:cc:7a:77:
         6b:b8:ff:39:3a:56:68:99:07:d0:21:38:75:fb:a7:b0:1f:0e:
         ca:d0:52:2e:db:09:a4:50:95:1f:92:40:ae:64:dd:f7:9a:b6:
         44:f2:d9:73:1d:af:37:1c:f7:dd:cc:ed:1e:b5:78:e0:2a:fa:
         a6:fd:8c:1c:c1:93:a0:7a:94:c1:00:c5:5a:f9:ad:1c:3f:70:
         24:4a:f4:18:b2:9a:c1:6b:7c:ef:2b:8d:7e:dd:de:bb:eb:32:
         e1:82:3f:bc:1e:84:79:e9:36:4d:a9:81:75:ac:0e:02:a9:09:
         78:a2:1f:b5:89:4c:b7:84:9b:8c:e4:00:fa:74:8e:fc:71:dd:
         f1:59:ff:6f:1e:8a:d2:41:2e:ad:3a:30:ec:15:02:b0:c7:04:
         ab:99:58:4a:a6:f9:35:cd:82:6b:2d:3a:27:bd:83:f7:a6:d5:
         50:11:a1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:26:46 2026 by rpki-client